topic Displaying client tcp traffic in Wireless

Displaying client tcp traffic

Mr. Bash — Sun, 04 Jul 2021 00:08:39 GMT

I want to see what my associated users are connecting to [ip address] and what tcp port.

I see a command that is close to what I'm looking for....show tcp brief. This is what I get:

TCB Local Address Foreign Address (state)

00B1063C 10.1.1.15.23 laptop.am.4823 ESTAB

[This shows my laptop hitting the AP on port 23.]

The problem is that this is from the AP perspective, I'm looking for connection details from a user perspective.

Does anyone know if this is possible and if so what command would accomplish this?

ericgarnel — Wed, 18 Feb 2009 15:09:39 GMT

You will want to look into netflow

there are several commercial apps that do this as well as open source apps such as ntop.

You can also get such info along with even more detail using sniffer software.

The cisco wireless system has the ability to feed a sniffer app from the wireless directly.

if you are using 4.x wlc, you can feed it to airopeek, if you are using 5.x & above, you can point it at wireshark